Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa
File:                     3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa (raw, json)
Hash identifier:          v846FD6YyNOKWhHNBD9HUyw+YZGGxHPd7XhxKZAOYUg=
Subject key identifier:   56:2D:CE:17:32:38:73:89:22:36:A3:B2:62:67:0B:7C:C0:0B:C5:DC
Certificate issuer:       /CN=CF5339F87B278717067560B9059C3098661F754B
Certificate serial:       038262CB968C4C65D774AD3E3479FD620C73D2EF
Authority key identifier: CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa
Signing time:             Tue 05 Mar 2024 17:48:08 +0000
ROA not before:           Tue 05 Mar 2024 17:43:08 +0000
ROA not after:            Tue 04 Mar 2025 17:48:08 +0000
asID:                     265762
IP address blocks:        128.201.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:82:62:cb:96:8c:4c:65:d7:74:ad:3e:34:79:fd:62:0c:73:d2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF5339F87B278717067560B9059C3098661F754B
        Validity
            Not Before: Mar  5 17:43:08 2024 GMT
            Not After : Mar  4 17:48:08 2025 GMT
        Subject: CN=562DCE17323873892236A3B262670B7CC00BC5DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:a9:34:30:7b:b0:0c:d4:aa:2b:70:1a:d3:
                    4a:48:46:2d:19:7c:a0:68:9e:ab:a1:d4:52:e3:39:
                    2b:ea:94:f4:09:62:24:90:a3:44:88:b7:de:6e:11:
                    ea:d5:f0:f9:4b:6d:d1:dd:94:f7:83:f7:11:ca:5c:
                    c6:9c:9e:c1:2b:a2:f3:a8:f7:0d:d3:3d:70:24:c3:
                    1c:2f:40:b3:ce:6b:39:9a:a3:3a:80:39:45:37:dd:
                    21:59:e6:96:35:2b:e1:57:c2:b1:c2:ad:70:64:3a:
                    5e:e6:fd:3c:d3:2f:a1:6e:fd:a0:81:04:47:9e:08:
                    e1:36:b4:c1:79:3d:78:1d:a9:b6:f8:1f:2e:60:15:
                    39:d8:cd:2e:44:72:5b:d0:b7:1a:f5:8f:6a:ca:0d:
                    e2:c1:d1:a8:4f:be:87:ba:64:df:04:8f:53:1f:af:
                    08:a4:a8:2f:cb:f8:dd:28:c2:47:3f:32:9b:7a:dd:
                    77:ab:bc:bb:0f:79:7d:43:b8:e3:56:af:e8:f5:8c:
                    09:2e:dd:a0:6e:e0:8d:d9:4e:c3:31:be:02:2d:f5:
                    a0:15:e4:c1:56:a2:7a:a4:cc:ea:ad:00:40:6e:22:
                    18:69:bf:6a:16:ac:65:9e:c4:6d:13:3c:28:15:7f:
                    04:85:73:86:f2:f5:6e:fa:e6:1f:1c:c5:0e:4b:ab:
                    46:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2D:CE:17:32:38:73:89:22:36:A3:B2:62:67:0B:7C:C0:0B:C5:DC
            X509v3 Authority Key Identifier:
                keyid:CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f6:c8:a1:28:4b:91:7a:16:df:53:87:5f:9d:96:a4:10:a6:
         58:13:12:82:00:e0:ab:42:68:60:0e:16:33:c4:a2:c2:f6:21:
         65:58:f2:78:a2:41:c7:7f:a7:c5:d0:81:b6:0b:b0:26:07:3f:
         cd:84:6c:a0:04:63:4d:38:a3:d4:2a:a9:4f:33:fe:f3:5b:d0:
         79:b2:6d:be:0e:1a:1d:ab:c9:38:6f:ba:c3:30:3e:b1:31:29:
         d0:b5:8d:39:65:2b:04:ee:9d:a4:8d:7d:92:5a:59:2c:d6:73:
         2f:49:3a:c3:4b:67:97:a9:d6:20:d8:89:4a:1b:dd:74:7f:ed:
         6a:8f:a2:72:dc:45:a2:38:5c:f5:8f:48:11:23:52:df:a1:46:
         d2:5b:25:a6:e7:93:17:69:75:a0:78:37:88:51:72:9b:f4:96:
         02:f0:5c:19:13:09:c9:50:2a:d1:85:fd:de:4f:85:39:0c:1a:
         c2:61:6e:64:d5:57:3c:b5:28:f4:00:58:b6:9f:b5:70:49:d5:
         c6:c3:6b:1c:72:c7:a4:ca:16:35:1f:52:21:2e:b7:86:42:b7:
         3c:46:ee:f6:b6:79:47:43:4e:d7:31:89:e3:e2:53:6c:42:6f:
         c1:a4:a0:d1:6f:89:84:27:a3:e9:be:7b:6e:6f:8a:76:59:c4:
         ef:a8:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:13:47 2024 by rpki-client on console-fra.rpki-client.org